Secure your organization with Google Cloud. Get AI-powered SecOps, threat intelligence, and the most trusted cloud security to stay ahead of threats.
Our summaryGoogle Cloud's security business includes Mandiant consulting and Google Security Operations. Google's threat research is published by the Google Threat Intelligence Group and Project Zero.
“Google Security Operations, formerly known as Chronicle, enables security teams to detect, investigate, and respond to threats with the speed, scale, and intelligence of Google.”
Cloud SIEM and SOAR, formerly Chronicle.
Product page“Learn how Mandiant incident response services help with every step of crisis response, from detection and investigation to analysis and remediation.”
Incident response services from Mandiant, available on retainer.
Product page“Google Threat Intelligence: visibility into the latest threats with curated cyber threat intel from the frontlines, our intel analysts, OSINT, and threat insights from Google.”
Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.
Product pageIndependent tests, peer reviews and articles about Google. We link to them; we did not write or commission them, and nobody pays to appear here.
Stories in our coverage based on what researchers at Google found or reported: 349 in total.
Attackers use agentic AI for faster exploitation, shrinking the window for defense.
Apache HTTP Server patches critical HTTP/2 remote code execution flaw CVE-2026-119618.
Google Cloud VMs on AMD Turin chips vulnerable to three CPU side-channel flaws.
Hackers exploited Qubole's AWS IAM credentials to breach multiple cloud environments.
Google expands Gemini 4 Carbon access; AI agents verify Signal code security.
ClickFix social engineering tactics evolve with new delivery and payload techniques.
Hackers exploited Qubole IAM roles to access AWS accounts and download S3 buckets.
Google DeepMind uses AI agents to formally verify Signal's post-quantum handshake and Triple Ratchet.
Google Chrome patched its eighth actively exploited zero-day vulnerability of 2026.
Attackers abuse compromised Qubole AWS credentials to steal secrets from customer environments via supply-chain attack.
Stories where a Google product had a vulnerability or was attacked, or Google itself was: 335 in total. Useful if you run its products.
Microsoft November 2026 Patch Tuesday addresses 1,095 vulnerabilities, including 64 critical flaws and an actively
Chrome and Firefox updates patch over 180 vulnerabilities, including critical flaws.
CISA adds Google Chromium 0-day CVE-2026-125350 to KEV catalog, actively exploited.
Google session hijacking campaign uses calendar invites and live proxies to steal corporate credentials.
Google Chrome 157.0.8103.78/.79 patches 83 vulnerabilities including 5 critical RCE-enabling use-after-free flaws.
Android GhostMap flaw allows malformed APKs to cause crash loops, potentially requiring factory reset.
Hackers advertise a $1,000/month tool claiming persistent Gmail access after password resets.
Microsoft's Patch Tuesday addresses 1,093 bugs, including one actively exploited Outlook vulnerability.
Google patches eighth actively exploited Chrome zero-day of 2026, CVE-2026-125350.
CISA adds six exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog.
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
